last executing test programs: 5.721138295s ago: executing program 0 (id=3719): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x18, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0xb, "08c82ce8da6ee06cb8"}, {0x5, 0xd, "02270e044594b2d4f5edfb7c1d1ff2f7"}, {0x0, 0x8, "00de6c83d500"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xf, "8475be675de6a70a8525dc91e5"}, {0x6, 0x9, "00000000008000"}]}]}}}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 5.206373722s ago: executing program 4 (id=3721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 5.077176344s ago: executing program 0 (id=3722): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) 5.067969325s ago: executing program 2 (id=3723): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x104a8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.658230019s ago: executing program 4 (id=3725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x400, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0xd14, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7fff}}, 0x2, 0xfb7}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x6, @private1, 0x9a}}, 0x4e23}, 0x90) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) 4.606884042s ago: executing program 2 (id=3726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000003c0)={0x1d, r5, 0x102030405060708, {0x2, 0xff, 0x3}, 0xfe}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000400)={0x1d, r3, 0x0, {0x0, 0xee}, 0xff}, 0x18) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x15, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="3daa0000000000007110110000000000950000000000000023702e8fd75e9f00177e0ab68a3bc5a9dbff727bb61e0592bd305cf7cbd8912f94282df817f1da887b9040a4d498be1221b561da29972fdd35063103b68f4f5eec5330fb7b1a7817d7b1424e511bbe3a1781f30beecd03514d4d7114ef82315494a331deaa60063e"], &(0x7f0000000980)='syzkaller\x00'}, 0x80) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xd, 0xfff1}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3ff, 0x8001, 0x4, 0x7, 0x800000, 0x6, 0xfffffffb, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async, rerun: 64) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x4, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24049084}, 0x0) sendto$packet(r10, &(0x7f0000000480)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, 0x0, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000500)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@deltclass={0x4c, 0x29, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x288117ace669c55c, 0x5}, {0x9, 0x1}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5d, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_clsact={0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.210139771s ago: executing program 1 (id=3727): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000800)={0xa, 0x4e23, 0x4, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x7, @local, 0x3a1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="300000000000000029000000360000000802000000000000000100c910fe88000000000000f40a000000000001000000180000000000000029000000360000002b0000000000000020000000000000e398"], 0x80}}], 0x2, 0x24000800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) r3 = socket$inet6(0xa, 0xa, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2f0, 0x1f8, 0x430, 0x2f0, 0x108, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private1, @mcast2, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xff], 'veth0\x00', 'vlan1\x00', {0xff}, {}, 0x5e, 0x7f, 0x0, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x24}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], 0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x61c7, 0x200, 0x3, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffffff, 0xffffff00], 'veth0_macvtap\x00', 'team_slave_0\x00', {0xff}, {}, 0x2f, 0xf, 0x4, 0x10}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@rand_addr=0x64010101, 0x30, 0x1c, 0x800}}}, {{@ipv6={@loopback, @empty, [0xff, 0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'syzkaller0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3a, 0xd8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffffff, 0xffffffff, 0x0, 0xff], [0x0, 0xffff00, 0xff, 0xff000000], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {}, {}, 0x4, 0x7, 0x5, 0x52}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@loopback, 0x0, 0x27, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x8, @vifc_lcl_addr=@loopback, @empty}, 0x10) 3.97410743s ago: executing program 3 (id=3728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000001502000000000000000300000d000000000300000001000000000000000100000004000000030000000000000000000005"], 0x0, 0x5e, 0x0, 0x1}, 0x28) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002000010026bd700002000000010100800c000100020000000000000014000300"], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002000010026bd700002000000010100800c000100020000000000000014000300"], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f7f8e05e18006b5c49148e65e7766136"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}}, 0x0) 3.879535919s ago: executing program 4 (id=3729): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000007c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000800)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={&(0x7f0000000300)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0xfffe) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5, 0x3fd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r8, 0xf13}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="df2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) (async) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000310009002abd700000000000040000002c0011802ebe"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.391008227s ago: executing program 3 (id=3730): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 2.874044381s ago: executing program 1 (id=3731): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e23, @multicast2}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000001580)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x6, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000002200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000002240), 0xfffffedf, 0x10, &(0x7f0000002280)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000002340)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000002440), &(0x7f0000002480)}, 0x2c) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) socket$key(0xf, 0x3, 0x2) write(r0, 0x0, 0x0) 2.765194126s ago: executing program 2 (id=3732): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.437862455s ago: executing program 0 (id=3733): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000016000000000000000000000000f824a51aeb1bfa3de06bbf89326635186a9d71cd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0004000000000000bfa3000000000000b704000000000000850000003c292b601b1202963f000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="78000000130005000100000000000200079269cb", @ANYRES32=r3, @ANYBLOB="000000000000000058001a0006000000020000004c000480"], 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) 2.269153239s ago: executing program 3 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0x1) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0x1) sendto$packet(r2, &(0x7f0000000440)="050316df60a0af427f73dea51204", 0xe, 0x4000844, &(0x7f0000000480)={0x11, 0x86dd, r3, 0x1, 0xfd, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000000180c20086dd6000000000103aff00000000000000000000ffffac1414bbff02000000000000000000000000000186009078ff00"/68], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x2, 0x184}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r6, 0x84, 0x85, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e22, @empty}}, 0x8}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r6, 0x84, 0x85, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e22, @empty}}, 0x8}, 0x90) sendto$packet(r2, &(0x7f00000004c0)="a9f87db1820dcb975485c3ad8e38cf844fdb46a993a9f32b319a558d3c6c1a2f50e44bac3f4474e986557910ccc3bbcb8c8df066943105722064ae5e6b912022cfb0d1370a2cb4e3323f9a3d39299d99bad4a561ed15056c9d0727123ec2909892562635b89bb8335cb679262655da179530bf178e7ddf669157612ebbe301180b6481cf5fc8a24d45928c6ede04d734533c70684a4f79486d393f214fd886e6e6433875d8048009a01a5d93664cc4aa0d64d3a9a44cf9c1b2d981", 0xbb, 0x80, &(0x7f0000000580)={0x11, 0xf5, r4, 0x1, 0x4}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000005}, 0x94) 2.268385298s ago: executing program 1 (id=3735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x200}, 0x10}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x79}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x200}, 0x10}], 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x79}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x801) (async) 2.204196449s ago: executing program 2 (id=3736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="c5", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000004c0)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x2, 0x9, 0x2, 0x9, 0x4, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2b, 0x3501}]}, 0x20}}, 0x4008010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff0e, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x24, 0x301, 0x270bda5, 0x25d7dbfa, {0x3}}, 0x14}}, 0x80) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f0000000340)=@phonet={0x23, 0x0, 0x1, 0x27}, 0x80, 0x0}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000500)={'ip6erspan0\x00', 0x1}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6, 0x4, 0x11, 0x0, @empty=0xb00, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xffff4af6}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0xffffffffffffff97, 0x10, &(0x7f0000001740), 0xffffffffffffffc2}, 0x48) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r7, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 2.108146726s ago: executing program 4 (id=3737): r0 = socket$inet6(0xa, 0x6, 0x3e) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140), 0x11000) vmsplice(r7, &(0x7f00000004c0)=[{&(0x7f0000000500)="85", 0x1}], 0x1, 0x0) vmsplice(r6, &(0x7f0000000540)=[{&(0x7f0000000580), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x18000000000002a0, 0xd50, 0xfd60, &(0x7f0000000480)="b9ff03076804d773000000100100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xdc78, @private2, 0x3796}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x7, @local, 0x1e}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e23, 0xe, @empty, 0x7}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0xa4) sendto$inet6(r0, &(0x7f00000000c0)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) 1.850064735s ago: executing program 0 (id=3738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0x6}, {0x10, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xcf5}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_to_team\x00'}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xfffffff8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c5}, 0x240400c4) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000740)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$l2tp6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000540)=0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x800) r10 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r11) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240448f1}, 0x24048845) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, 0xffffffffffffffff, 0x852a8000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040045}, 0x4010) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @mcast2, 0xb}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x84) 1.848745833s ago: executing program 1 (id=3739): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xb, 0x9, @l2={'eth', 0x3a, 'pimreg\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000400)={{r4, &(0x7f00000002c0)='nfc\x00', 0x240, &(0x7f0000000300)={@align=0x3, {0x3, 0x5fc, 0x120, 0x6}}, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4}, {[0x146, 0x70000, 0x5, 0xff]}, 0x8, 0x28, &(0x7f00000003c0)=""/40}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x92b18462744098a9}, 0x4000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000580)={0x3, 'bond_slave_1\x00', {0xfffffff8}, 0x6}) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000005c0)=0x9) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x20, 0x80c8, 0x1, 0xfff, {{0xc, 0x4, 0x1, 0x3f, 0x30, 0x67, 0x0, 0x1, 0x721210f788a6eb6a, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x58, [@dev={0xac, 0x14, 0x14, 0x14}, @local, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @noop]}}}}}) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@deltclass={0x24, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff1}, {0xd, 0xc}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000a40)={0x2, 0x8}, &(0x7f0000000a80)=0x8) (async, rerun: 64) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x158, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2de}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 64) bind$netlink(r5, &(0x7f0000000d00)={0x10, 0x0, 0x6, 0x20000}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x3, 0x0, 0x4, 0x200, r5, 0x9, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r7, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfffffab7, 0xef99, 0x5c2e, 0x5, 0x4, 0x100, 0x3a7d]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000814}, 0x2000) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000f00)={r4}) (rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000f40)) (async, rerun: 64) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000f80)={r9, 0x0, 0x4, 0x6, 0x40, 0x8}) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) (async) r11 = accept4(r4, &(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000001080)=0x80, 0x0) (async) r12 = getuid() sendmsg$nl_route(r11, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)=@ipv6_delroute={0x128, 0x19, 0x300, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x9, 0xfc, 0x0, 0x0, 0xb, 0x400}, [@RTA_METRICS={0xd0, 0x8, 0x0, 0x1, "0ad9656e31a94388ed9c977b050d324c72942fb9e671c8f21381807ed2eb0e4c56ed63a6c534f44e474115151e3ea3990a7f8959295c1247943a92a2398a1a71a8ce41ae248a103984d0a9dc9780624843e63a9897bc45b2ab12ee2c54ac7078ab2df24d9a41afa8c078589c49b536307f1c758ea46175a522bbf3564572be708c928301ff6f64624dbbfdae134655a13aac77a03dec884d30423a2c260cf46397ca89ab7525ec82acf77ab708605a3d8100b2c7f1b95ca2e7411ccadbcfa74e8a5324e3aab3039cd1522aca"}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_UID={0x8, 0x19, r12}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000080) 1.792511188s ago: executing program 3 (id=3740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x21, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x22, 0x0, &(0x7f00000006c0)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1412, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}}, 0x804) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) socket$phonet(0x23, 0x2, 0x1) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) 1.551324144s ago: executing program 0 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0xf2, 0x401, 0x101, 0x5890, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004cb30c0004000000186975f9b99d02000000000006000000083c07000400000200000011000042eb8e632188a988b08b93900000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32, @ANYRES8=0x0], &(0x7f0000000480)='GPL\x00', 0x6, 0xf6, &(0x7f0000000540)=""/246, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x4, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0xe, 0x4}], 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f00000008c0)="57c0c768acaf928ab4e72d1797e088116acf51f4b564ce0b3fe3bbb4fbd73d7732d9966a7f76e4e7d13b0970dd1bd239616aef54a79269c1011d5585fb717ba1c0eccb6a7e344527b56e276d1f84855bfb3c074979b6063565f3f3a5dacb2c44d55011eee2dc70bf880dd3379412d98695e61477995ea24ad978789531db36889995e6", 0x83) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x38}}, 0x0) listen(r4, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000a80)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), 0xffffffffffffffff) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x100) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x25, 0x9, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r12, r2, 0x0, r2}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400056002665e5e0029874550000cf7bb87921059f14e3834d3a7bf4ae2945d1927b19a3935a30d47ff28dcdbf", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) 1.46578818s ago: executing program 3 (id=3742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000150000060003002710000008000700000003e8100005800800010066747000"], 0x9c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@getneightbl={0x14, 0x42, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000880)) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xcc, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x20008011) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000f80), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x20000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000e00)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) write$nci(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="400003ff00008e254c21fb9e43f8cebbd2fc907a66a69ab3829922cb9b3fa21d6ca2944abe124f52e133f3d49c0c1dda611a9d98722789ce4bf38feed0d7d109bdafa4389fcb"], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000840), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0xe06, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030408000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030508000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff0000080004000000012c"], 0xb4}}, 0x0) 1.448618613s ago: executing program 4 (id=3743): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r1, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) 886.090888ms ago: executing program 2 (id=3744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xfed4696131a9f0f2}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800080006000d000800"], 0xfce) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0), 0x69) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000000c0)={0x20000000}) 782.279246ms ago: executing program 4 (id=3745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x91cc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x3c}}, 0x0) (async) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000c00)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000c40)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0xfffffffffffffff7, 0xa, 0x8}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x64, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x4, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, r5}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x1f}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x3, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd211e8434478f1d2aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7acaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x3, 0x7, 0x9, 0x6, 0x96b8, 0x1, 0xffff8001, 0x3fd, 0x2, 0xc, 0x9, 0x5, 0x88, 0x3, 0x40}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}]}, 0x178}}, 0x24008004) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)={@map=r5, r6, 0x31, 0x4, 0x0, @void, @value=r6}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @generic={0x78, 0x3, 0x3, 0x2, 0x6}, @alu={0x4, 0x1, 0x2, 0x7, 0xb, 0x40, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x7, 0x6, 0xf, 0xd9f3, 0x7}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}], &(0x7f0000000300)='GPL\x00', 0x2, 0x94, &(0x7f0000000340)=""/148, 0x41000, 0x2, '\x00', 0x0, @sched_cls=0x2e, r3, 0x8, &(0x7f0000000440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x6, 0x1, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r5, r7], &(0x7f0000000ac0)=[{0x4, 0x3, 0x10, 0xb}, {0x1, 0x3, 0x9, 0x2}], 0x10, 0x2}, 0x94) 526.452998ms ago: executing program 1 (id=3746): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)='veth0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r6, 0x4, 0x70bd24, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x38, r8, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x4098884, &(0x7f0000000540)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r5, &(0x7f00000005c0)="b48ae96668f8190891ac946a27e0a4a53f310ee2da5fc3f2e6c7c73d177435c409bcb1988ca51b052aad3921d7427660d6a3966726f940571524329b8023052e3219e98319709ae5ef3484bfb73ba5a05ca73391e936ca114fe7700c658528140376d4d1fcfd5fe09582655d1f7029911a632cc5fbce6a2dca9c6fccf315291935bc39c05367cd838a5f844e875d033fa9c215a2fa694e4ee42ed0fa50ed8d5ebd9864d8f32d3f999a0a6048eeb0b53ff7159acda8dd", 0xb6, 0x4810, &(0x7f0000000680)=@phonet={0x23, 0x6, 0x6, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a31000000000800044000000000090001"], 0x64}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r11) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c80)={0x60, r12, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000e40)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc000000000000000000000000000000200100"/64, @ANYRES8=0x0, @ANYRESHEX=r3, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0014"], 0x1a4}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095", @ANYRES8=r0, @ANYRESDEC=r4], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 380.557379ms ago: executing program 3 (id=3747): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000740)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="3500000002"], 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_deladdr={0x4c, 0x15, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x80, 0xff, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0xc, 0xf60d, 0x3ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_FLAGS={0x8, 0x8, 0x7e}, @IFA_RT_PRIORITY={0x8, 0x9, 0x24000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x4041) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r11) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000aaaab0aaaa30ffffffffffff080045f8007800000000082f9078ac1e0001e0000001000086dd00649078020000000300000000000000818f58832ef40812355f4ae3d11ba131f939f4368a035d682cd3c246c28e0086ed2c8c760c185d774a6e2c52b340b6a1d432129a7cc202c2bf8c39fa1b24aca19042cd6b94a5e2e9ef20e3ab58f73abf"], 0xca) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000000c00080008000000", @ANYRES32=0x0, @ANYBLOB="08001e0097110005"], 0x30}}, 0x0) 86.288154ms ago: executing program 0 (id=3748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x24}], 0x1, 0x9) (async) close(r1) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000480)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000004c0)={r4, 0x2, 0x4, 0x4}, 0x10) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}]}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.225129ms ago: executing program 2 (id=3749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000f0000000000000000000a00000a20000000000a05290000000001000000070000000900010073797a300000000048000000090a01040000000000000000070000000900010073797a30000000000c00098008000140e0000000080005400000003c08000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x48020) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x3, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 0s ago: executing program 1 (id=3750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r0, 0x18000000, 0x40, 0x7f}) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_NEWNSID={0x34, 0x58, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8, 0x2, r4}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 358.839233][T15314] netlink: zone id is out of range [ 358.839241][T15314] netlink: zone id is out of range [ 358.839271][T15314] netlink: zone id is out of range [ 358.993893][T15320] netlink: 'syz.4.2382': attribute type 11 has an invalid length. [ 359.422472][T15348] __nla_validate_parse: 13 callbacks suppressed [ 359.422491][T15348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2385'. [ 359.510798][T15351] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 360.158944][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 360.160907][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 360.432576][T15390] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 360.581055][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 360.581076][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 360.606603][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 360.606622][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 361.132666][T15424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2409'. [ 361.459958][T15444] net_ratelimit: 50 callbacks suppressed [ 361.459977][T15444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.565835][T15449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.633087][T15459] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 361.699648][T15463] pimreg3: entered allmulticast mode [ 362.170061][T15485] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2424'. [ 362.314733][T15493] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2428'. [ 362.692952][T15511] syzkaller0: entered promiscuous mode [ 362.692974][T15511] syzkaller0: entered allmulticast mode [ 362.789880][T15516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.122269][T15536] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 363.201632][T15532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.201668][T15532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.201695][T15532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.201721][T15532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 363.557593][T15532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.561359][T15532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.561393][T15532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.561419][T15532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 363.887777][T15532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.887816][T15532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.887845][T15532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.887872][T15532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 364.038787][T15532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.038826][T15532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.038854][T15532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.038881][T15532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 364.575219][ T6661] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.575258][ T6661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 364.575281][ T6661] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 364.575304][ T6661] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.607944][ T6658] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.607977][ T6658] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 364.608001][ T6658] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 364.608024][ T6658] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.608069][ T6658] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.608093][ T6658] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 364.608116][ T6658] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 364.608138][ T6658] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.614499][ T6661] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.614528][ T6661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 364.614552][ T6661] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 364.614575][ T6661] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 364.762456][T15583] __nla_validate_parse: 3 callbacks suppressed [ 364.762477][T15583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 364.810608][T15583] veth4: entered promiscuous mode [ 364.810633][T15583] veth4: entered allmulticast mode [ 365.601279][T15634] x_tables: unsorted underflow at hook 4 [ 365.617203][T15637] SET target dimension over the limit! [ 365.623263][T15634] netlink: 'syz.3.2467': attribute type 7 has an invalid length. [ 365.623285][T15634] netlink: 'syz.3.2467': attribute type 8 has an invalid length. [ 365.660982][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 365.880983][T15602] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 365.881125][T15602] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 366.029830][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2471'. [ 366.140474][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2474'. [ 366.404183][T15671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2478'. [ 366.440029][T15674] netlink: 'syz.3.2479': attribute type 32 has an invalid length. [ 366.528611][T15677] netlink: 'syz.1.2481': attribute type 39 has an invalid length. [ 366.678080][T15682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2482'. [ 366.900685][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 366.977916][T15703] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 366.978008][T15703] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 367.380197][T15722] tipc: Started in network mode [ 367.380243][T15722] tipc: Node identity ac1414aa, cluster identity 4711 [ 367.381633][T15722] tipc: New replicast peer: 172.20.20.187 [ 367.405260][T15722] tipc: Enabled bearer , priority 10 [ 367.788157][T15752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2502'. [ 367.984544][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2501'. [ 368.080538][T15781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2505'. [ 368.494420][ T5758] tipc: Node number set to 2886997162 [ 368.718775][T15811] netlink: 'syz.0.2514': attribute type 5 has an invalid length. [ 369.065691][T15829] geneve4: entered allmulticast mode [ 369.323840][T15843] bridge4: entered promiscuous mode [ 369.323857][T15843] bridge4: entered allmulticast mode [ 370.141067][T15884] __nla_validate_parse: 40 callbacks suppressed [ 370.141089][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 370.400139][T15898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.593653][T15912] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.2544'. [ 370.686247][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 371.735234][T15942] netlink: 'syz.4.2549': attribute type 3 has an invalid length. [ 371.972054][T15972] ip6_vti0: Caught tx_queue_len zero misconfig [ 372.001246][T15972] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2555'. [ 372.046106][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 372.146159][T15979] erspan0: entered promiscuous mode [ 372.271502][ T143] IPVS: starting estimator thread 0... [ 372.364869][T15988] IPVS: using max 32 ests per chain, 76800 per kthread [ 372.544975][T15991] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2560'. [ 372.545000][T15991] nbd: illegal input index 65508 [ 373.161157][T16021] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2572'. [ 373.561476][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2574'. [ 373.561497][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2574'. [ 373.561844][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2574'. [ 373.678773][T16028] ip_vti0: Master is either lo or non-ether device [ 374.612202][T16077] ip_tables: iptables: counters copy to user failed while replacing table [ 374.729637][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.732528][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.744156][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.762994][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.772031][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.367702][T16106] __nla_validate_parse: 6 callbacks suppressed [ 375.367723][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 375.476379][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'. [ 375.772330][T16081] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.977350][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 376.105659][T16081] wlan1 speed is unknown, defaulting to 1000 [ 376.107587][T16081] lo speed is unknown, defaulting to 1000 [ 376.109572][T16081] wg0 speed is unknown, defaulting to 1000 [ 376.111275][T16081] virt_wifi0 speed is unknown, defaulting to 1000 [ 376.326222][T16147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.350256][T16149] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 376.393769][T16149] bond10: entered promiscuous mode [ 376.394201][T16149] 8021q: adding VLAN 0 to HW filter on device bond10 [ 376.432311][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 376.468480][T16149] macvtap2: entered allmulticast mode [ 376.497702][T16149] macvtap3: entered allmulticast mode [ 376.530149][T16149] bond10: (slave bridge7): making interface the new active one [ 376.530173][T16149] bridge7: entered promiscuous mode [ 376.533205][T16149] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 376.746717][T16081] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.746814][T16081] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.746937][T16081] bridge_slave_0: entered allmulticast mode [ 376.749417][T16081] bridge_slave_0: entered promiscuous mode [ 376.755115][T16081] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.756943][T16081] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.757068][T16081] bridge_slave_1: entered allmulticast mode [ 376.759219][T16081] bridge_slave_1: entered promiscuous mode [ 376.816416][ T5634] Bluetooth: hci5: command tx timeout [ 376.889755][T16081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.904156][T16081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.081764][T16081] team0: Port device team_slave_0 added [ 377.091459][T16081] team0: Port device team_slave_1 added [ 377.149550][T16186] veth1_to_bond: Caught tx_queue_len zero misconfig [ 377.153262][T16081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.153278][T16081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.153303][T16081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.218259][T16186] macsec2: entered promiscuous mode [ 377.270658][T16081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.270675][T16081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.270701][T16081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.366103][T16081] hsr_slave_0: entered promiscuous mode [ 377.367134][T16081] hsr_slave_1: entered promiscuous mode [ 377.367871][T16081] debugfs: 'hsr0' already exists in 'hsr' [ 377.367890][T16081] Cannot create hsr debugfs directory [ 377.664001][T16081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.677211][T16081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.847236][T16081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.847271][T16081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.954595][T16211] netlink: 'syz.4.2615': attribute type 15 has an invalid length. [ 377.965702][T16081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.965735][T16081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.998603][T16211] netlink: 'syz.4.2615': attribute type 15 has an invalid length. [ 378.002740][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2614'. [ 378.092566][T16081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.092589][T16081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.117231][T16213] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 378.145384][ T6662] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 378.145428][ T6662] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 378.145460][ T6662] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 378.145486][ T6662] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 378.464171][T16081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.493185][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.496007][T16081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.518632][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.524884][T16081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.549798][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.553184][T16081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.560822][T16081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.586681][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.586739][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.807807][T16081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.873737][T16081] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.891287][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.891411][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.895385][ T5634] Bluetooth: hci5: command tx timeout [ 378.922906][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.923021][ T6662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.001379][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2625'. [ 379.018840][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 379.022428][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 379.050145][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 379.050450][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'. [ 379.196942][T16260] team_slave_0: Caught tx_queue_len zero misconfig [ 379.210118][T16260] erspan0: Device is already in use. [ 379.241279][T16267] erspan0: Device is already in use. [ 379.592070][ T5758] virt_wifi0 speed is unknown, defaulting to 1000 [ 379.639951][T16280] bond12: entered allmulticast mode [ 379.640309][T16280] 8021q: adding VLAN 0 to HW filter on device bond12 [ 379.641376][T16281] sit0: entered promiscuous mode [ 379.670437][T16281] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 379.894012][T16290] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 379.920371][T16290] bond0 (unregistering): Released all slaves [ 379.999544][T16293] ip_tables: iptables: counters copy to user failed while replacing table [ 380.148454][T16310] ip_tables: iptables: counters copy to user failed while replacing table [ 380.384348][T16315] __nla_validate_parse: 68 callbacks suppressed [ 380.384369][T16315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2640'. [ 380.384384][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 380.412159][T16322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2640'. [ 380.689951][T16330] netlink: 'syz.0.2642': attribute type 4 has an invalid length. [ 380.700410][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 380.892998][T16081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.970205][T16338] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 380.970228][T16338] netlink: 'syz.1.2645': attribute type 2 has an invalid length. [ 380.977562][ T5634] Bluetooth: hci5: command tx timeout [ 381.103388][T16081] veth0_vlan: entered promiscuous mode [ 381.130829][T16081] veth1_vlan: entered promiscuous mode [ 381.190243][T16346] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 381.193109][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 381.204577][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 381.503476][T16081] veth0_macvtap: entered promiscuous mode [ 381.523976][T16081] veth1_macvtap: entered promiscuous mode [ 381.548518][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 381.603760][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 381.603782][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 381.611609][T16358] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 381.611629][T16358] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2649'. [ 381.620998][T16081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.661661][T16081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.707415][ T6662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.707458][ T6662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.707491][ T6662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.707521][ T6662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.708109][T16363] Bluetooth: hci0: unsupported parameter 5135 [ 381.708128][T16363] Bluetooth: hci0: unsupported parameter 8192 [ 381.708140][T16363] Bluetooth: hci0: unsupported parameter 5135 [ 381.708153][T16363] Bluetooth: hci0: unsupported parameter 8192 [ 382.038930][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.038951][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.172433][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.172454][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.212328][T16390] sctp: [Deprecated]: syz.4.2660 (pid 16390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.212328][T16390] Use struct sctp_sack_info instead [ 382.276740][T16394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 382.673592][T16415] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.781093][T16420] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 382.849835][T16420] bond7: entered promiscuous mode [ 382.850354][T16420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.882943][T16423] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 382.959675][T16420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.960067][T16420] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 382.960087][T16420] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 382.998175][T16427] netlink: 'syz.2.2668': attribute type 2 has an invalid length. [ 383.025165][T16420] bond7: (slave wireguard0): making interface the new active one [ 383.025190][T16420] wireguard0: entered promiscuous mode [ 383.049344][T16420] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 383.055897][ T5634] Bluetooth: hci5: command tx timeout [ 384.080209][T16472] can: request_module (can-proto-0) failed. [ 384.296765][T16478] can: request_module (can-proto-0) failed. [ 384.398981][T16493] gretap1: entered promiscuous mode [ 384.726853][T16507] ip6gre1: entered promiscuous mode [ 385.581192][T16551] __nla_validate_parse: 8 callbacks suppressed [ 385.581211][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2698'. [ 385.694025][T16558] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 385.698671][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2696'. [ 385.966532][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 386.065789][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 386.283942][T16574] netlink: 'syz.0.2704': attribute type 16 has an invalid length. [ 386.283964][T16574] netlink: 'syz.0.2704': attribute type 3 has an invalid length. [ 386.283976][T16574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2704'. [ 386.431285][T16582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 386.597272][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 386.597303][T16588] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 386.758323][T16601] netlink: 'syz.1.2713': attribute type 3 has an invalid length. [ 387.003139][T16609] bridge0: port 3(syz_tun) entered blocking state [ 387.003298][T16609] bridge0: port 3(syz_tun) entered disabled state [ 387.003479][T16609] syz_tun: entered allmulticast mode [ 387.026219][T16609] syz_tun: entered promiscuous mode [ 387.026852][T16609] bridge0: port 3(syz_tun) entered blocking state [ 387.026972][T16609] bridge0: port 3(syz_tun) entered forwarding state [ 387.053606][T16611] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 387.096079][T16611] netlink: 'syz.0.2716': attribute type 58 has an invalid length. [ 387.096093][T16611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2716'. [ 387.256343][T16623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.368651][T16628] netlink: 'syz.0.2720': attribute type 12 has an invalid length. [ 387.368672][T16628] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 387.368684][T16628] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2720'. [ 387.368701][T16628] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2720'. [ 387.379893][T16628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2720'. [ 387.729964][T16647] xt_hl: Unknown TTL match mode: 255 [ 387.850754][T16664] lo: left promiscuous mode [ 387.858293][T16664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.962802][T16669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.039336][T16706] gtp1: entered promiscuous mode [ 389.039360][T16706] gtp1: entered allmulticast mode [ 389.062910][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.419213][T16722] batman_adv: batadv0: Adding interface: syzkaller0 [ 389.419325][T16722] batman_adv: batadv0: Interface activated: syzkaller0 [ 389.723728][T16734] netlink: 'syz.3.2748': attribute type 1 has an invalid length. [ 389.813321][T16737] netlink: 'syz.2.2750': attribute type 11 has an invalid length. [ 389.835628][T16721] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 389.870302][T16721] batman_adv: batadv0: Removing interface: syzkaller0 [ 390.213626][T16758] bond8: Removing last arp target with arp_interval on [ 390.529268][T16769] syzkaller0: entered promiscuous mode [ 390.529295][T16769] syzkaller0: entered allmulticast mode [ 391.131681][T16798] Bluetooth: hci0: unsupported parameter 5135 [ 391.131704][T16798] Bluetooth: hci0: unsupported parameter 8192 [ 391.131716][T16798] Bluetooth: hci0: unsupported parameter 5135 [ 391.131729][T16798] Bluetooth: hci0: unsupported parameter 8192 [ 392.754165][T16803] netlink: 'syz.4.2769': attribute type 3 has an invalid length. [ 392.754186][T16803] __nla_validate_parse: 7 callbacks suppressed [ 392.754196][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'. [ 392.994033][T16822] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.122601][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.122630][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 393.122834][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.123030][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.123211][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.123398][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.123598][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.123806][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.124023][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 393.266079][T16809] macvtap1: entered promiscuous mode [ 393.266103][T16809] hsr0: entered promiscuous mode [ 393.266370][T16809] macvtap1: entered allmulticast mode [ 393.266384][T16809] hsr0: entered allmulticast mode [ 393.266396][T16809] hsr_slave_0: entered allmulticast mode [ 393.266418][T16809] hsr_slave_1: entered allmulticast mode [ 393.391189][T16830] Unsupported ieee802154 address type: 0 [ 393.563740][T16839] tipc: New replicast peer: 255.255.255.255 [ 393.574588][T16839] tipc: Enabled bearer , priority 10 [ 393.996806][T16864] netlink: 'syz.0.2782': attribute type 3 has an invalid length. [ 394.677404][ T10] tipc: Node number set to 1290083108 [ 394.706136][T16906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 394.706170][T16906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.962902][T16925] bond9: Removing last ns target with arp_interval on [ 395.484182][T16962] netlink: 'syz.3.2804': attribute type 10 has an invalid length. [ 395.599892][T16969] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 395.642508][T16968] ip_tables: iptables: counters copy to user failed while replacing table [ 395.743307][T16980] veth0_to_bond: mtu less than device minimum [ 395.770298][T16982] veth0_to_bond: mtu less than device minimum [ 395.838243][T16984] netlink: 'syz.4.2812': attribute type 26 has an invalid length. [ 396.142867][T17003] gre0: Caught tx_queue_len zero misconfig [ 396.582012][T17030] ip_tables: iptables: counters copy to user failed while replacing table [ 396.653564][T17030] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 397.062032][T17052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 397.080164][T17050] sctp: [Deprecated]: syz.2.2833 (pid 17050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.080164][T17050] Use struct sctp_sack_info instead [ 397.650418][T17085] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 397.768252][T17088] __nla_validate_parse: 70 callbacks suppressed [ 397.768274][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 398.061684][T17099] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 398.073236][T17099] team0: Device ipvlan5 is already an upper device of the team interface [ 398.175296][T17113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2851'. [ 398.233120][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 398.781488][T17127] syzkaller1: entered promiscuous mode [ 398.781503][T17127] syzkaller1: entered allmulticast mode [ 398.886569][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 398.886593][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 398.887523][T17129] ªªªªª»: renamed from dummy0 (while UP) [ 401.090807][T17108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.275951][T17139] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 401.282516][T17139] bond1 (unregistering): Released all slaves [ 401.356823][T17147] netlink: 'syz.3.2861': attribute type 7 has an invalid length. [ 401.385132][T17146] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.385536][T17146] gretap2: entered promiscuous mode [ 401.386222][T17146] gretap2: entered allmulticast mode [ 401.580139][T17159] xt_hashlimit: size too large, truncated to 1048576 [ 401.691481][T17166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2866'. [ 401.893934][T17170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2867'. [ 401.922483][T17170] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.165996][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.196434][T17180] tipc: Enabled bearer , priority 10 [ 402.196497][ T9] wg0 speed is unknown, defaulting to 1000 [ 402.217085][T17186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2871'. [ 402.245836][ T6659] bond6: (slave ip6gretap1): link status up again after 0 ms [ 402.245864][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.355232][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.397309][T17197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2872'. [ 402.454595][ T5639] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.467053][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.587737][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.694693][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.855463][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 402.965002][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 403.085226][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 403.217742][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2888'. [ 403.331906][T17261] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 403.331906][T17261] Please contact the netfilter-devel mailing list or update your nftables rules. [ 403.521725][T17270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2893'. [ 403.527303][T17272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2893'. [ 403.562651][T17269] geneve4: entered promiscuous mode [ 403.562674][T17269] geneve4: entered allmulticast mode [ 403.590478][ T143] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 19999 - 0 [ 403.590539][ T143] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 19999 - 0 [ 403.590573][ T143] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 19999 - 0 [ 403.590603][ T143] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 19999 - 0 [ 403.608118][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2895'. [ 403.941834][T17302] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2902'. [ 403.980364][T17302] bond11 (unregistering): Released all slaves [ 404.168570][T17310] erspan0: entered allmulticast mode [ 404.312432][T17318] veth0: left allmulticast mode [ 404.312451][T17318] veth0: left promiscuous mode [ 404.312590][T17318] bridge0: port 3(veth0) entered disabled state [ 404.478478][T17321] xt_hashlimit: size too large, truncated to 1048576 [ 404.530880][T17323] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2908'. [ 404.531069][T17323] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 404.581002][T17323] 0ªX¹¦Dö»: entered allmulticast mode [ 404.896372][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805520a000: rx timeout, send abort [ 404.896579][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805520a000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 404.910406][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805520a800: rx timeout, send abort [ 404.910606][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805520a800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 405.147669][T17343] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 405.214141][T17343] bond1: option mode: invalid value (7) [ 405.238504][T17343] bond1 (unregistering): Released all slaves [ 405.292182][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 405.315023][T17355] netlink: 'syz.3.2913': attribute type 10 has an invalid length. [ 405.315122][T17355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2913'. [ 405.408798][T17360] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2919'. [ 405.408815][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 405.539110][T17355] dummy0: entered promiscuous mode [ 405.643892][T17375] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 406.051000][T17397] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 406.051021][T17397] netlink: 'syz.2.2929': attribute type 3 has an invalid length. [ 406.070190][ T5001] udevd[5001]: worker [14357] /devices/virtual/block/nbd2 is taking a long time [ 406.233564][T17405] netlink: 'syz.0.2932': attribute type 2 has an invalid length. [ 406.233585][T17405] netlink: 'syz.0.2932': attribute type 11 has an invalid length. [ 406.239449][T17406] netlink: 'syz.4.2930': attribute type 2 has an invalid length. [ 406.239471][T17406] nbd: couldn't find a device at index -2147221500 [ 406.767718][T17436] atomic_op ffff88807fcb41e0 conn xmit_atomic 0000000000000000 [ 406.869338][T17437] syzkaller0: entered promiscuous mode [ 406.869363][T17437] syzkaller0: entered allmulticast mode [ 406.872827][T17441] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 407.014603][ T6654] net_ratelimit: 31 callbacks suppressed [ 407.014625][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.126174][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.244994][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.354886][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.465488][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.575299][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.685653][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.915097][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 407.984723][T17499] batadv_slave_1: entered allmulticast mode [ 408.046755][T17499] dvmrp6: entered allmulticast mode [ 408.064740][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 408.072758][T17496] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 408.072793][T17496] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 408.072833][T17496] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 408.787919][T17504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.808107][T17504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.813649][T17504] bond0 (unregistering): Released all slaves [ 408.843747][ T3660] smbdirect: ib_dev[syz1] removed [ 408.858684][T17503] sit2: entered promiscuous mode [ 408.858698][T17503] sit2: entered allmulticast mode [ 408.868759][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.869045][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.869258][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.869463][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.869658][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.869862][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.870058][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.870255][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.875111][T17515] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.875133][T17515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.875948][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.876394][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.876610][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.876839][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.877047][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.877266][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.877475][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.881239][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.881448][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.881651][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.881896][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.882090][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.882284][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.882518][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.885304][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.885521][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.885715][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.885965][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.886167][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.886401][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.886596][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.893762][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.894088][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.900789][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.901010][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.901210][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.901415][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.901613][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.901811][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.918531][ T24] infiniband syz1: ib_query_port failed (-19) [ 408.919044][T17498] batadv_slave_1: left allmulticast mode [ 408.926030][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.926265][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.926472][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.926670][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.926863][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.927054][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.927247][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.948963][T17496] siw: device registration error -19 [ 408.953129][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.953339][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.953541][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.953733][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.954061][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.957912][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.958137][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.958331][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.962969][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.963179][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.963435][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.963626][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.982838][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.983083][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.983282][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.983946][T17510] bond6: option mode: unable to set because the bond device has slaves [ 408.984148][T17510] bond6: option mode: unable to set because the bond device has slaves [ 409.411035][T17528] __nla_validate_parse: 14 callbacks suppressed [ 409.411053][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 409.475839][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 409.546178][T17531] xt_TCPMSS: Only works on TCP SYN packets [ 409.553511][T17539] netlink: 'syz.0.2969': attribute type 20 has an invalid length. [ 409.553529][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 409.566508][T17536] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2968'. [ 409.697317][T17539] netlink: 'syz.0.2969': attribute type 20 has an invalid length. [ 409.697338][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'. [ 409.725935][T17555] x_tables: duplicate entry at hook 3 [ 409.757759][T17556] x_tables: duplicate entry at hook 3 [ 410.060696][T17573] bond0: entered promiscuous mode [ 410.060914][T17573] bond0: entered allmulticast mode [ 410.061352][T17573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.104881][T17573] bond5: entered promiscuous mode [ 410.104905][T17573] bond5: entered allmulticast mode [ 410.107190][T17573] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.147531][T17582] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2978'. [ 410.192961][T17573] bond6: entered promiscuous mode [ 410.193239][T17573] bond6: entered allmulticast mode [ 410.203057][T17573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.279524][T17573] bond7: entered promiscuous mode [ 410.283210][T17573] bond7: entered allmulticast mode [ 410.283589][T17573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.441930][T17573] bond8: entered promiscuous mode [ 410.441968][T17573] bond8: entered allmulticast mode [ 410.443150][T17573] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.669731][T17573] bond9: entered promiscuous mode [ 410.669773][T17573] bond9: entered allmulticast mode [ 410.670160][T17573] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.712362][T17573] bond10: entered promiscuous mode [ 410.712386][T17573] bond10: entered allmulticast mode [ 410.712750][T17573] 8021q: adding VLAN 0 to HW filter on device bond10 [ 410.725105][T17628] ipt_ECN: cannot use operation on non-tcp rule [ 410.725373][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 410.771445][T17626] syz.2.2983 (17626) used obsolete PPPIOCDETACH ioctl [ 410.771525][T17624] 8021q: VLANs not supported on wg2 [ 410.842399][T17573] bond11: entered promiscuous mode [ 410.842514][T17573] bond11: entered allmulticast mode [ 410.842871][T17573] 8021q: adding VLAN 0 to HW filter on device bond11 [ 410.935566][T17638] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2993'. [ 410.935617][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 410.935638][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 411.568029][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.582910][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.583759][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.600811][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.608434][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.960525][T17662] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 412.066808][ T143] net_ratelimit: 23 callbacks suppressed [ 412.066829][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.133292][T17706] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 412.182765][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.285944][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.395822][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.505402][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.530841][T17680] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.615545][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.725789][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.838398][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 412.945518][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.037883][T17741] sctp: [Deprecated]: syz.1.3017 (pid 17741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.037883][T17741] Use struct sctp_sack_info instead [ 413.070754][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 413.137095][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 413.393122][T17680] wlan1 speed is unknown, defaulting to 1000 [ 413.400681][T17680] lo speed is unknown, defaulting to 1000 [ 413.404913][T17680] wg0 speed is unknown, defaulting to 1000 [ 413.411934][T17680] virt_wifi0 speed is unknown, defaulting to 1000 [ 413.694439][ T5634] Bluetooth: hci4: command tx timeout [ 413.970275][T17782] netlink: 'syz.3.3025': attribute type 2 has an invalid length. [ 414.162194][T17788] gretap0: entered promiscuous mode [ 414.162222][T17788] gretap0: entered allmulticast mode [ 414.243203][T17680] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.243943][T17680] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.261002][T17680] bridge_slave_0: entered allmulticast mode [ 414.263264][T17680] bridge_slave_0: entered promiscuous mode [ 414.278974][T17680] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.279121][T17680] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.279243][T17680] bridge_slave_1: entered allmulticast mode [ 414.281057][T17680] bridge_slave_1: entered promiscuous mode [ 414.420512][T17808] __nla_validate_parse: 16 callbacks suppressed [ 414.420533][T17808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3032'. [ 414.423310][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 414.450578][T17680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.496892][T17680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.532336][T17804] netlink: 'syz.3.3034': attribute type 12 has an invalid length. [ 414.532357][T17804] netlink: 'syz.3.3034': attribute type 29 has an invalid length. [ 414.532370][T17804] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3034'. [ 414.532386][T17804] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 414.532398][T17804] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 414.671295][T17680] team0: Port device team_slave_0 added [ 414.704023][T17680] team0: Port device team_slave_1 added [ 414.845543][T17680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.845561][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.845586][T17680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.907608][T17680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.907626][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.907652][T17680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.052365][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 415.075728][T17680] hsr_slave_0: entered promiscuous mode [ 415.079036][T17680] hsr_slave_1: entered promiscuous mode [ 415.085073][T17680] debugfs: 'hsr0' already exists in 'hsr' [ 415.085093][T17680] Cannot create hsr debugfs directory [ 415.138209][T17833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3039'. [ 415.774543][ T5634] Bluetooth: hci4: command tx timeout [ 415.863062][T17680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 415.863097][T17680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.933295][T17863] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 416.028625][T17680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.028657][T17680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.197815][T17680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.197849][T17680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.250829][T17882] netlink: 'syz.2.3051': attribute type 3 has an invalid length. [ 416.348393][T17680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 416.348427][T17680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.718051][T17900] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 416.819474][T17906] netlink: 'syz.2.3060': attribute type 2 has an invalid length. [ 416.821294][T17680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.842095][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.848640][T17680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.858849][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 416.862387][T17906] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 416.898013][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.942218][T17906] bond13: entered promiscuous mode [ 416.942634][T17906] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.945236][T17680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.976102][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.977649][T17680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.982962][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.033727][T17913] bond13: (slave bridge6): making interface the new active one [ 417.033751][T17913] bridge6: entered promiscuous mode [ 417.048727][T17913] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 417.070012][T17918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3063'. [ 417.070036][T17918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3063'. [ 417.072989][T17918] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3063'. [ 417.073019][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3063'. [ 417.175309][ T143] net_ratelimit: 18 callbacks suppressed [ 417.175330][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.288522][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.326326][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.329771][T17680] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.359609][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.359774][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.391101][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.391209][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.508555][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.625813][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.735026][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.846186][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 417.855437][ T5634] Bluetooth: hci4: command tx timeout [ 417.955111][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 418.063766][T17974] tc_dump_action: action bad kind [ 418.066364][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 418.181386][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 418.296494][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 418.750186][T17680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.853710][T18009] syzkaller0: entered promiscuous mode [ 418.853733][T18009] syzkaller0: entered allmulticast mode [ 419.292703][T18031] ipvlan5: entered allmulticast mode [ 419.292725][T18031] virt_wifi0: entered allmulticast mode [ 419.710996][T17680] veth0_vlan: entered promiscuous mode [ 419.743474][T17680] veth1_vlan: entered promiscuous mode [ 419.803138][T18059] vlan2: entered allmulticast mode [ 419.916422][T17680] veth0_macvtap: entered promiscuous mode [ 419.934951][ T5634] Bluetooth: hci4: command tx timeout [ 419.950167][T17680] veth1_macvtap: entered promiscuous mode [ 420.037793][T17680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.089517][T17680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.230891][T18075] __nla_validate_parse: 7 callbacks suppressed [ 420.230910][T18075] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3105'. [ 420.295995][ T6658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.310529][ T6654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.310574][ T6654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.310608][ T6654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.396292][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3103'. [ 420.477866][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.477888][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.599939][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.599961][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.790978][T18099] veth1_macvtap: left promiscuous mode [ 420.791003][T18099] macsec0: entered allmulticast mode [ 420.926764][T18099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3106'. [ 420.968040][T18103] x_tables: unsorted underflow at hook 3 [ 421.719498][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.725404][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.735616][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.749156][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.756677][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.782960][T18121] netlink: 'syz.4.3113': attribute type 12 has an invalid length. [ 422.181761][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 422.265719][ T3660] net_ratelimit: 29 callbacks suppressed [ 422.265740][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.343740][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3119'. [ 422.449119][ T5636] syz_tun (unregistering): left allmulticast mode [ 422.449146][ T5636] syz_tun (unregistering): left promiscuous mode [ 422.449237][ T5636] bridge0: port 4(syz_tun) entered disabled state [ 422.513048][T18152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.559531][T18152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.617595][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.659414][ T6658] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.659450][ T6658] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.728702][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.801347][ T6658] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.801382][ T6658] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.836267][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.863416][T18166] syz_tun: entered allmulticast mode [ 422.868674][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 422.891202][ T6658] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.891239][ T6658] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.933399][T18161] syz_tun: left allmulticast mode [ 422.945163][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 422.985960][ T6658] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.985997][ T6658] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.061399][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 423.166081][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 423.212621][T18120] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.318769][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 423.547110][ T6658] veth1_to_bridge: left allmulticast mode [ 423.547153][ T6658] veth1_to_bridge: left promiscuous mode [ 423.548376][ T6658] bridge0: port 5(veth1_to_bridge) entered disabled state [ 423.553598][ T6658] bridge_slave_1: left promiscuous mode [ 423.553795][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.601176][ T6658] bridge_slave_0: left allmulticast mode [ 423.601200][ T6658] bridge_slave_0: left promiscuous mode [ 423.601413][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.657306][ T6658] dvmrp6: left allmulticast mode [ 423.658502][ T6658] pimreg3: left allmulticast mode [ 423.681990][ T6658] batman_adv: batadv0: Interface deactivated: gretap1 [ 423.854991][ T5638] Bluetooth: hci0: command tx timeout [ 424.167236][ T6658] batman_adv: batadv0: Removing interface: gretap1 [ 424.298509][ T6658] .` (unregistering): (slave bridge0): Releasing backup interface [ 424.352123][ T6658] bond3 (unregistering): (slave bridge4): Releasing active interface [ 424.411887][ T6658] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.427713][ T6658] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.433073][ T6658] .` (unregistering): Released all slaves [ 424.453918][ T6658] bond1 (unregistering): Released all slaves [ 424.479066][ T6658] bond2 (unregistering): Released all slaves [ 424.532632][ T6658] bond3 (unregistering): Released all slaves [ 424.546973][ T6658] bond4 (unregistering): Released all slaves [ 424.562215][ T6658] bond0 (unregistering): Released all slaves [ 424.580984][ T6658] bond5 (unregistering): Released all slaves [ 424.605576][ T6658] bond6 (unregistering): Released all slaves [ 424.613094][ T6658] bond7 (unregistering): Released all slaves [ 424.634948][ T6658] bond8 (unregistering): Released all slaves [ 424.642416][ T6658] bond9 (unregistering): Released all slaves [ 424.677702][ T6658] bond10 (unregistering): Released all slaves [ 424.692179][ T6658] bond11 (unregistering): Released all slaves [ 424.729014][T18120] wlan1 speed is unknown, defaulting to 1000 [ 424.794659][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 424.869282][T18204] syzkaller1: entered promiscuous mode [ 424.869306][T18204] syzkaller1: entered allmulticast mode [ 424.877208][T18120] lo speed is unknown, defaulting to 1000 [ 424.884174][T18120] wg0 speed is unknown, defaulting to 1000 [ 424.893860][T18120] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 425.123419][ T6658] tipc: Disabling bearer [ 425.123667][ T6658] tipc: Left network mode [ 425.126625][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 425.629088][T18238] IPv6: NLM_F_REPLACE set, but no existing node found! [ 425.648145][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 425.648164][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 425.648197][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 425.829288][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 426.169505][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 426.656661][T18282] netlink: 'syz.3.3143': attribute type 11 has an invalid length. [ 426.676399][T18285] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 426.676419][T18285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3144'. [ 426.724640][T18120] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.724751][T18120] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.724919][T18120] bridge_slave_0: entered allmulticast mode [ 426.731234][T18120] bridge_slave_0: entered promiscuous mode [ 426.749090][T18120] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.749300][T18120] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.749435][T18120] bridge_slave_1: entered allmulticast mode [ 426.759641][T18120] bridge_slave_1: entered promiscuous mode [ 426.828355][T18120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.875174][T18120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.052874][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3147'. [ 427.121082][T18309] netlink: 872 bytes leftover after parsing attributes in process `syz.3.3149'. [ 427.181052][T18299] macsec1: entered allmulticast mode [ 427.181734][T18299] batman_adv: batadv0: Adding interface: macsec1 [ 427.181747][T18299] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.181772][T18299] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 427.251423][T18120] team0: Port device team_slave_0 added [ 427.265471][T18120] team0: Port device team_slave_1 added [ 427.412731][T18311] batman_adv: batadv0: Adding interface: syzkaller0 [ 427.412750][T18311] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.419372][T18311] batman_adv: batadv0: Interface activated: syzkaller0 [ 427.558081][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 427.559061][T18120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.559074][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.559098][T18120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.561467][T18120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.561481][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.561504][T18120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.846756][T18328] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 427.849918][T18120] hsr_slave_0: entered promiscuous mode [ 427.851193][T18120] hsr_slave_1: entered promiscuous mode [ 427.851909][T18120] debugfs: 'hsr0' already exists in 'hsr' [ 427.851926][T18120] Cannot create hsr debugfs directory [ 427.951401][T18321] tipc: Enabled bearer , priority 0 [ 427.993835][T18336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3154'. [ 428.093466][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3155'. [ 428.122426][T18336] bond0: (slave dummy0): Releasing backup interface [ 428.122460][T18336] dummy0 (unregistering): left promiscuous mode [ 428.241154][T18325] syzkaller0: entered promiscuous mode [ 428.241176][T18325] syzkaller0: entered allmulticast mode [ 428.318969][ T6661] net_ratelimit: 3 callbacks suppressed [ 428.318989][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.376385][T18344] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 428.378875][T18344] bond1 (unregistering): Released all slaves [ 429.029264][ T6658] hsr_slave_0: left promiscuous mode [ 429.036391][ T6658] hsr_slave_1: left promiscuous mode [ 429.037275][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.037294][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.069096][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.069117][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.096716][ T6658] veth0_macvtap: left promiscuous mode [ 429.096831][ T6658] veth1_vlan: left promiscuous mode [ 429.096929][ T6658] veth0_vlan: left promiscuous mode [ 429.540086][ T6663] smbdirect: ib_dev[ÿ] removed [ 429.916063][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 430.024769][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.055654][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'. [ 430.215853][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.440120][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.509409][ T6658] IPVS: stop unused estimator thread 0... [ 430.624649][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.834542][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.067426][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.177175][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.284643][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.457672][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.501366][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.513883][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.515572][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.540846][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.552760][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.553056][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3180'. [ 431.879875][T18120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.899845][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.900753][T18120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.930070][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.936333][T18120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.968954][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.971093][T18120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.011417][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.132556][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3184'. [ 432.323004][T18120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.388819][T18498] x_tables: duplicate underflow at hook 1 [ 432.396759][T18120] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.429438][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.429545][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.553384][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.553490][ T6662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.103984][T18535] bond6: option mode: unable to set because the bond device has slaves [ 433.129568][T18525] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.319159][T18545] netlink: 'syz.3.3189': attribute type 1 has an invalid length. [ 433.405953][T18545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.416297][T18560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3192'. [ 433.425830][ T62] net_ratelimit: 9 callbacks suppressed [ 433.425848][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.466614][T18557] bond1: (slave gretap1): making interface the new active one [ 433.468184][T18557] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 433.472311][T18560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.513324][T18559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.534928][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.646159][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.755711][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 433.892223][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 433.913168][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 433.925832][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.078812][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.186870][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.517104][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.629536][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 435.060648][T18624] netlink: 'syz.0.3205': attribute type 5 has an invalid length. [ 435.147313][T18120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.249573][T18629] netlink: 'syz.0.3205': attribute type 5 has an invalid length. [ 435.483245][T18120] veth0_vlan: entered promiscuous mode [ 435.529008][T18120] veth1_vlan: entered promiscuous mode [ 435.700471][T18120] veth0_macvtap: entered promiscuous mode [ 435.732781][T18120] veth1_macvtap: entered promiscuous mode [ 435.841094][T18120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.904078][T18120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.947057][ T6654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.947673][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.947712][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.947744][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.234006][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.234025][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.326200][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.326220][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.523914][T18700] xt_l2tp: missing protocol rule (udp|l2tpip) [ 437.358055][T18738] __nla_validate_parse: 42 callbacks suppressed [ 437.358075][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 437.361195][ T5634] block nbd3: Receive control failed (result -107) [ 437.449540][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 437.462968][ T5634] block nbd4: Receive control failed (result -32) [ 438.097996][T18764] tls_set_device_offload: netdev not found [ 438.175667][T18764] netlink: 'syz.2.3231': attribute type 39 has an invalid length. [ 438.225203][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.229299][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.231065][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.232098][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.232728][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.526720][ T6654] net_ratelimit: 31 callbacks suppressed [ 438.526741][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.634366][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.690307][T18781] ip_tables: iptables: counters copy to user failed while replacing table [ 438.756512][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 438.868223][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 439.080283][T18795] ip_tables: iptables: counters copy to user failed while replacing table [ 439.140913][T18790] syzkaller0: entered promiscuous mode [ 439.140939][T18790] syzkaller0: entered allmulticast mode [ 439.179477][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 439.329256][T18803] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3239'. [ 439.331348][T18803] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.022417][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.022474][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.336992][ T5634] Bluetooth: hci2: command tx timeout [ 441.127504][T18800] kthread_run failed with err -4 [ 441.132470][T18812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3242'. [ 441.135849][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 441.139038][T18770] rxe_eth0 speed is unknown, defaulting to 1000 [ 441.244400][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 441.350091][T18820] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.3244'. [ 441.366422][T18822] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3245'. [ 441.492567][T18770] wlan1 speed is unknown, defaulting to 1000 [ 441.502056][T18770] lo speed is unknown, defaulting to 1000 [ 441.516235][T18770] wg0 speed is unknown, defaulting to 1000 [ 441.690169][T18835] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3247'. [ 441.947534][T18846] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 442.070326][ T5634] block nbd296: Receive control failed (result -32) [ 442.292577][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 442.313820][T18864] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 442.424760][ T5634] Bluetooth: hci2: command tx timeout [ 442.461549][T18865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3252'. [ 442.538087][T18877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 442.599665][T18770] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.599816][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.599963][T18770] bridge_slave_0: entered allmulticast mode [ 442.601633][T18770] bridge_slave_0: entered promiscuous mode [ 442.632306][T18770] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.635768][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.635922][T18770] bridge_slave_1: entered allmulticast mode [ 442.637619][T18770] bridge_slave_1: entered promiscuous mode [ 442.731048][T18770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.732903][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 442.755264][T18879] sctp: [Deprecated]: syz.3.3257 (pid 18879) Use of int in maxseg socket option. [ 442.755264][T18879] Use struct sctp_assoc_value instead [ 442.771654][T18770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.841346][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 442.941775][T18770] team0: Port device team_slave_0 added [ 442.969334][T18770] team0: Port device team_slave_1 added [ 443.007355][T18770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.007372][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.007398][T18770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.009377][T18770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.009391][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.009415][T18770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.150813][T18770] hsr_slave_0: entered promiscuous mode [ 443.151799][T18770] hsr_slave_1: entered promiscuous mode [ 443.152497][T18770] debugfs: 'hsr0' already exists in 'hsr' [ 443.152517][T18770] Cannot create hsr debugfs directory [ 443.434941][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3264'. [ 443.624414][ T143] net_ratelimit: 7 callbacks suppressed [ 443.624435][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 443.708969][T18915] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 443.795834][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 443.848720][T18928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3269'. [ 443.951230][T18770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.951268][T18770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.958545][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3271'. [ 444.026484][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.157157][T18770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.157193][T18770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.235361][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.351461][T18770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.351498][T18770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.386801][T18953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3278'. [ 444.475961][T18770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.475996][T18770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.495082][ T5634] Bluetooth: hci2: command tx timeout [ 444.524508][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.634521][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.655823][T18960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'. [ 444.655956][T18960] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3281'. [ 444.705362][ T6661] tipc: Subscription rejected, illegal request [ 444.806758][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.955169][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 444.987723][T18978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.992942][T18978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.100829][T18969] syzkaller0: entered promiscuous mode [ 445.100855][T18969] syzkaller0: entered allmulticast mode [ 445.377148][T19003] netlink: 'syz.4.3291': attribute type 18 has an invalid length. [ 446.575424][ T5634] Bluetooth: hci2: command tx timeout [ 446.964865][T18770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.967903][T18770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.968771][T18770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.972103][T18770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.972968][T18770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.023325][T18770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.045022][T18770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.076671][T18770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.139883][ T6662] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.145302][ T6654] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.149074][ T6662] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.149116][ T6662] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.253819][T18770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.280458][T18770] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.309256][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.309366][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.381644][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.381753][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.438484][T18770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.438509][T18770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.528805][T19019] netlink: 'syz.4.3293': attribute type 29 has an invalid length. [ 447.601493][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055935800: rx timeout, send abort [ 447.706967][T19028] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 448.101544][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055935800: abort rx timeout. Force session deactivation [ 448.103256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055935c00: rx timeout, send abort [ 448.430243][T18770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.585975][T19064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3299'. [ 448.603302][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055935c00: abort rx timeout. Force session deactivation [ 448.653228][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 448.712130][T19071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3301'. [ 448.738395][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3301'. [ 448.742497][T19075] block nbd5: Unsupported socket: should be TCP or UNIX. [ 448.783747][T19062] syzkaller0: entered promiscuous mode [ 448.783772][T19062] syzkaller0: entered allmulticast mode [ 448.845175][ T143] net_ratelimit: 11 callbacks suppressed [ 448.845196][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 448.845249][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'. [ 449.136102][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 449.136150][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 449.164766][T19095] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.165324][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 451.352732][T18770] veth0_vlan: entered promiscuous mode [ 452.676777][T19097] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 452.680183][T19097] bond2 (unregistering): Released all slaves [ 452.728711][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 452.771672][T18770] veth1_vlan: entered promiscuous mode [ 452.854621][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 452.931952][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 452.956986][T19128] openvswitch: netlink: Key 17 has unexpected len 8 expected 4 [ 452.977786][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 453.045131][ T6658] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.045183][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 453.074909][ T6661] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.075833][ T6661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.155360][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 453.158263][T18770] veth0_macvtap: entered promiscuous mode [ 453.287781][T19149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.321581][T19149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.372171][T19141] rxe_eth0 speed is unknown, defaulting to 1000 [ 453.380027][T18770] veth1_macvtap: entered promiscuous mode [ 453.446568][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 453.489097][T18770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.561828][T18770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.640484][ T6660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.640538][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 453.641688][ T6661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.641824][ T6661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.641861][ T6661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.727794][T19141] wlan1 speed is unknown, defaulting to 1000 [ 453.758724][T19141] lo speed is unknown, defaulting to 1000 [ 453.780425][T19141] wg0 speed is unknown, defaulting to 1000 [ 453.889759][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.889781][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.947615][T19159] syzkaller0: entered promiscuous mode [ 453.947639][T19159] syzkaller0: entered allmulticast mode [ 454.006504][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.006525][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.007964][T19165] __nla_validate_parse: 5 callbacks suppressed [ 454.007981][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3322'. [ 454.007996][T19165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3322'. [ 454.155573][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.264667][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.303961][T19177] sctp: [Deprecated]: syz.3.3326 (pid 19177) Use of int in maxseg socket option. [ 454.303961][T19177] Use struct sctp_assoc_value instead [ 454.381417][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.487140][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.552993][T19185] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3327'. [ 454.594412][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3327'. [ 454.602990][ T5634] block nbd5: Receive control failed (result -107) [ 454.763451][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 454.763478][T19194] openvswitch: netlink: Invalid VLAN frame [ 454.841828][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 454.955774][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.087827][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.224473][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.374533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.376835][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 455.667551][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.669452][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.670220][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.671218][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.671846][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.680034][T19216] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 455.755285][T19219] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 455.776854][T19224] netlink: 'syz.0.3335': attribute type 11 has an invalid length. [ 455.776878][T19224] netlink: 'syz.0.3335': attribute type 4 has an invalid length. [ 455.776892][T19224] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3335'. [ 455.817867][ T30] audit: type=1800 audit(1793484421.118:2): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3337" name="memory.events" dev="tmpfs" ino=863 res=0 errno=-22 [ 455.841972][T19224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3335'. [ 456.141721][T19235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.228384][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 456.278977][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 456.395108][T19249] bond1: option xmit_hash_policy: invalid value (64) [ 456.396312][T19249] bond1 (unregistering): Released all slaves [ 456.793907][T19214] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.910580][T19284] syzkaller1: entered promiscuous mode [ 456.910605][T19284] syzkaller1: entered allmulticast mode [ 457.148608][T19296] ip6t_rt: too many addresses specified [ 457.152556][T19295] ip6t_rt: too many addresses specified [ 457.172321][T19295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3348'. [ 457.192147][T19295] sctp: [Deprecated]: syz.0.3348 (pid 19295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.192147][T19295] Use struct sctp_sack_info instead [ 457.736770][ T5638] Bluetooth: hci5: unexpected event 0x04 length: 17 > 10 [ 457.736801][ T5638] Bluetooth: unknown link type 128 [ 457.741018][T19317] netlink: 'syz.3.3352': attribute type 12 has an invalid length. [ 457.741038][T19317] netlink: 'syz.3.3352': attribute type 29 has an invalid length. [ 457.755283][T19214] wlan1 speed is unknown, defaulting to 1000 [ 457.760152][T19214] lo speed is unknown, defaulting to 1000 [ 457.768287][T19214] wg0 speed is unknown, defaulting to 1000 [ 457.774608][ T5638] Bluetooth: hci1: command tx timeout [ 457.858621][ T6662] wlan1: Trigger new scan to find an IBSS to join [ 458.435114][T19345] bond1: entered promiscuous mode [ 458.435136][T19345] bond1: entered allmulticast mode [ 458.465772][T19363] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 458.702187][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.702361][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.702805][T19214] bridge_slave_0: entered allmulticast mode [ 458.705781][T19214] bridge_slave_0: entered promiscuous mode [ 458.708679][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.708838][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.708963][T19214] bridge_slave_1: entered allmulticast mode [ 458.710881][T19214] bridge_slave_1: entered promiscuous mode [ 458.743228][T19214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.748018][T19214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.783591][T19214] team0: Port device team_slave_0 added [ 458.802953][T19214] team0: Port device team_slave_1 added [ 458.885167][T19214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.885184][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.885210][T19214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.941612][T19214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.941630][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.941657][T19214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.040226][T19390] __nla_validate_parse: 5 callbacks suppressed [ 459.040247][T19390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3370'. [ 459.186392][T19214] hsr_slave_0: entered promiscuous mode [ 459.189126][T19214] hsr_slave_1: entered promiscuous mode [ 459.190020][T19214] debugfs: 'hsr0' already exists in 'hsr' [ 459.190041][T19214] Cannot create hsr debugfs directory [ 459.194637][ T6654] net_ratelimit: 22 callbacks suppressed [ 459.194653][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 459.243978][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 459.244014][T19394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 459.513667][T19397] tc action pedit offset must be on 32 bit boundaries [ 459.518356][ T3660] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.518399][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 459.568604][T19214] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.568641][T19214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 459.568666][T19214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.568691][T19214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 459.568715][T19214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 459.737321][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 459.765746][T19214] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.765787][T19214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 459.765812][T19214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.765835][T19214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 459.765859][T19214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 459.795336][ T5638] Bluetooth: hci5: command tx timeout [ 459.856933][ T5638] Bluetooth: hci1: command tx timeout [ 459.857900][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 459.909162][T19214] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.909196][T19214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 459.909222][T19214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 459.909245][T19214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 459.909268][T19214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 459.969383][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 459.981142][T19421] netlink: 912 bytes leftover after parsing attributes in process `syz.4.3382'. [ 460.006098][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.051289][T19214] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.061026][T19214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 460.061058][T19214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.061084][T19214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 460.061109][T19214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 460.116573][ T6654] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.226927][ T6662] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.396603][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.397854][T19214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.419688][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.420537][T19214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.441933][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.460069][T19214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.467857][T19439] netlink: 'syz.4.3386': attribute type 15 has an invalid length. [ 460.467875][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3386'. [ 460.498752][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.499639][T19214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.524641][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.695862][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.779807][T19459] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 460.779945][ T6660] IPVS: starting estimator thread 0... [ 460.780494][T19459] netlink: 'syz.4.3390': attribute type 21 has an invalid length. [ 460.780512][T19459] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.780594][T19459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.780604][T19459] IPv6: NLM_F_CREATE should be set when creating new route [ 460.780827][T19459] IPv6: NLM_F_CREATE should be set when creating new route [ 460.780852][T19459] IPv6: NLM_F_CREATE should be set when creating new route [ 460.815103][ T3660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 460.827826][ T6658] wlan1: Trigger new scan to find an IBSS to join [ 460.865475][T19460] IPVS: using max 28 ests per chain, 67200 per kthread [ 460.976848][T19214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.012181][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.026465][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.026525][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.052960][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.053019][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.683892][T19480] netlink: 'syz.0.3394': attribute type 2 has an invalid length. [ 461.723260][T19480] !;: entered promiscuous mode [ 461.934646][ T5634] Bluetooth: hci1: command tx timeout [ 462.634991][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 462.640136][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3403'. [ 462.711536][T19526] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 462.711614][T19526] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 462.712875][T19526] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 462.713137][T19526] batman_adv: batadv0: Interface activated: macsec1 [ 462.726809][T19526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.763545][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.835183][T19531] netlink: 'syz.0.3405': attribute type 1 has an invalid length. [ 462.918858][T19214] veth0_vlan: entered promiscuous mode [ 462.938715][T19214] veth1_vlan: entered promiscuous mode [ 462.960226][ T6648] IPVS: starting estimator thread 0... [ 463.011814][T19214] veth0_macvtap: entered promiscuous mode [ 463.031885][T19214] veth1_macvtap: entered promiscuous mode [ 463.041459][T19535] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3406'. [ 463.041482][T19535] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3406'. [ 463.074790][T19539] IPVS: using max 51 ests per chain, 122400 per kthread [ 463.079191][T19214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.092365][T19214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.209733][ T6648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.215775][ T6661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.504895][ T6662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.511240][ T6660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.511261][ T6660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.517038][ T6660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.616754][ T6662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.616774][ T6662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.866854][ T6662] wlan1: Trigger new scan to find an IBSS to join [ 464.015232][ T5634] Bluetooth: hci1: command tx timeout [ 464.258809][ T6661] net_ratelimit: 56 callbacks suppressed [ 464.258831][ T6661] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.331266][T19591] __nla_validate_parse: 2 callbacks suppressed [ 464.331288][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 464.346679][T19587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3420'. [ 464.350749][T19587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3420'. [ 464.397105][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.528670][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.636894][T19612] syz_tun: entered allmulticast mode [ 464.667223][T19612] dvmrp6: entered allmulticast mode [ 464.730156][T19610] syz_tun: left allmulticast mode [ 464.737212][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.759419][ T6660] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 464.843575][T19621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3429'. [ 464.845234][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 464.846613][T19623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3429'. [ 464.938234][T19628] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3430'. [ 464.965585][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.042187][T19632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.105118][ T6663] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.157942][T19634] sch_tbf: peakrate 2 is lower than or equals to rate 4294967292 ! [ 465.172577][T19636] syzkaller0: entered promiscuous mode [ 465.172597][T19636] syzkaller0: entered allmulticast mode [ 465.201135][T19636] tipc: Started in network mode [ 465.201163][T19636] tipc: Node identity a691b8f1c839, cluster identity 4711 [ 465.201710][T19636] tipc: Enabled bearer , priority 10 [ 465.214338][T19636] pim6reg: entered allmulticast mode [ 465.218368][T19635] tipc: Resetting bearer [ 465.283760][T19640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3437'. [ 465.284932][T19635] tipc: Disabling bearer [ 465.320624][T19640] ip6gre3: entered promiscuous mode [ 465.320646][T19640] ip6gre3: entered allmulticast mode [ 465.341768][T19640] IPv6: sit2: Disabled Multicast RS [ 465.424952][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.481775][T19649] netlink: 'syz.2.3440': attribute type 32 has an invalid length. [ 465.481796][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'. [ 465.547857][T19649] bond1: Setting coupled_control to off (0) [ 465.560118][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 465.604557][T19660] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.632450][T19660] bridge_slave_0 (unregistering): left allmulticast mode [ 465.632477][T19660] bridge_slave_0 (unregistering): left promiscuous mode [ 465.632547][T19660] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.701560][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3442'. [ 465.710017][T19661] Bluetooth: MGMT ver 1.23 [ 465.725314][T19662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3441'. [ 468.547121][T19658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.747668][T19688] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 468.813394][ T6660] wlan1: Selected IBSS BSSID 00:8d:ff:ff:00:00 based on configured SSID [ 469.232853][T19716] tipc: Started in network mode [ 469.232883][T19716] tipc: Node identity ce9624473993, cluster identity 4711 [ 469.233131][T19716] tipc: Enabled bearer , priority 0 [ 469.288399][T19712] syzkaller0: entered promiscuous mode [ 469.288425][T19712] syzkaller0: entered allmulticast mode [ 469.326570][T19712] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 469.365654][T19712] tipc: Resetting bearer [ 469.390738][T19710] tipc: Resetting bearer [ 469.487452][T19710] tipc: Disabling bearer [ 469.549881][ T6658] net_ratelimit: 29 callbacks suppressed [ 469.549904][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.573395][T19726] netlink: 'syz.2.3462': attribute type 2 has an invalid length. [ 469.573416][T19726] __nla_validate_parse: 5 callbacks suppressed [ 469.573428][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 469.652815][ T5634] Bluetooth: hci4: unexpected event 0x05 length: 0 < 4 [ 469.662538][T19735] xfrm1: entered allmulticast mode [ 469.676747][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.787034][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.836918][T19751] netlink: zone id is out of range [ 469.836937][T19751] netlink: zone id is out of range [ 469.840571][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 469.896098][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 469.896211][T19749] tipc: Enabling of bearer rejected, failed to enable media [ 469.930747][T19755] netlink: 'syz.4.3471': attribute type 15 has an invalid length. [ 469.930770][T19755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3471'. [ 470.005640][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.110053][T19769] xt_TCPMSS: Only works on TCP SYN packets [ 470.115963][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.178799][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 470.180502][T19771] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3476'. [ 470.203981][T19771] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3476'. [ 470.227697][ T6658] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.338905][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 470.380268][T19788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3478'. [ 470.729838][T19796] can: request_module (can-proto-0) failed. [ 470.813425][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 470.871541][T19796] can: request_module (can-proto-0) failed. [ 470.903970][T19813] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3485'. [ 470.903993][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3485'. [ 470.933644][T19807] netlink: 'syz.4.3483': attribute type 8 has an invalid length. [ 471.003060][T19813] netlink: 'syz.0.3485': attribute type 2 has an invalid length. [ 471.017832][T19796] can: request_module (can-proto-0) failed. [ 471.073285][T19796] can: request_module (can-proto-0) failed. [ 471.283425][T19796] can: request_module (can-proto-0) failed. [ 471.358482][ T5634] Bluetooth: hci4: ACL packet too small [ 471.368305][T19837] netlink: 'syz.4.3492': attribute type 12 has an invalid length. [ 471.368324][T19837] netlink: 'syz.4.3492': attribute type 29 has an invalid length. [ 471.424936][T19841] nbd: must specify at least one socket [ 471.880304][T19871] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 472.044118][T19881] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 472.157582][T19889] tipc: Started in network mode [ 472.157613][T19889] tipc: Node identity ac14140f, cluster identity 4711 [ 472.157870][T19889] tipc: New replicast peer: 255.255.255.255 [ 472.161336][T19889] tipc: Enabled bearer , priority 10 [ 472.223267][T19891] netlink: 'syz.3.3508': attribute type 10 has an invalid length. [ 472.251964][T19891] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.269462][T19891] bond0: (slave team0): Enslaving as an active interface with an up link [ 472.342607][T19893] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 472.349115][T19893] xt_hashlimit: size too large, truncated to 1048576 [ 472.535078][T19907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.541272][T19907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.565398][T19907] bond0 (unregistering): (slave team0): Releasing backup interface [ 472.569008][T19907] bond0 (unregistering): Released all slaves [ 473.182346][ T7060] tipc: Node number set to 2886997007 [ 473.248646][T19943] syzkaller0: entered promiscuous mode [ 473.248668][T19943] syzkaller0: entered allmulticast mode [ 473.448144][T19949] netlink: 'syz.2.3524': attribute type 4 has an invalid length. [ 474.373646][T19999] netlink: 'syz.3.3544': attribute type 83 has an invalid length. [ 474.604426][ T6648] net_ratelimit: 32 callbacks suppressed [ 474.604447][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 474.715131][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 474.836434][ T6656] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 474.884799][T20029] validate_nla: 1 callbacks suppressed [ 474.884819][T20029] netlink: 'syz.3.3554': attribute type 4 has an invalid length. [ 474.975484][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.029820][T20040] netlink: 'syz.1.3557': attribute type 2 has an invalid length. [ 475.087505][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.227137][ T6656] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.233109][ T62] IPVS: starting estimator thread 0... [ 475.320909][T20055] IPVS: using max 33 ests per chain, 79200 per kthread [ 475.347187][ T6648] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.456710][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.575764][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 475.699504][ T62] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 476.138717][T20112] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 476.161673][T20112] team0: Device wg2 is of different type [ 476.453895][T20130] netlink: 'syz.3.3579': attribute type 1 has an invalid length. [ 476.454116][T20129] netlink: 'syz.3.3579': attribute type 1 has an invalid length. [ 476.487882][T20133] __nla_validate_parse: 14 callbacks suppressed [ 476.487901][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 476.487916][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 476.687803][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 477.465310][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 477.771213][T20177] bond0: entered promiscuous mode [ 477.771686][T20177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.782814][T20180] bond0: entered promiscuous mode [ 477.782833][T20180] bond_slave_0: entered promiscuous mode [ 477.783114][T20180] bond_slave_1: entered promiscuous mode [ 477.785974][T20180] batadv0: entered promiscuous mode [ 477.786775][T20180] debugfs: 'hsr1' already exists in 'hsr' [ 477.786794][T20180] Cannot create hsr debugfs directory [ 477.787523][T20180] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 477.837947][T20180] bond0: left promiscuous mode [ 477.837976][T20180] bond_slave_0: left promiscuous mode [ 477.838193][T20180] bond_slave_1: left promiscuous mode [ 477.842359][T20180] batadv0: left promiscuous mode [ 477.950686][T20182] bond0: entered promiscuous mode [ 477.950702][T20182] bond_slave_0: entered promiscuous mode [ 477.950862][T20182] bond_slave_1: entered promiscuous mode [ 477.958769][T20182] batadv0: entered promiscuous mode [ 477.963732][T20182] debugfs: 'hsr1' already exists in 'hsr' [ 477.963752][T20182] Cannot create hsr debugfs directory [ 477.972406][T20182] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 478.004409][T20182] bond0: left promiscuous mode [ 478.004431][T20182] bond_slave_0: left promiscuous mode [ 478.004677][T20182] bond_slave_1: left promiscuous mode [ 478.010775][T20182] batadv0: left promiscuous mode [ 478.461298][T20212] x_tables: duplicate underflow at hook 2 [ 478.461926][T20212] netlink: 'syz.3.3598': attribute type 10 has an invalid length. [ 478.476028][T20212] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 478.631153][T20216] Bluetooth: MGMT ver 1.23 [ 479.296603][T20255] netlink: 'syz.4.3611': attribute type 8 has an invalid length. [ 479.296626][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 479.297088][T20255] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.298593][T20255] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.466693][T20263] netlink: 'syz.2.3614': attribute type 23 has an invalid length. [ 479.586015][T20269] siw: device registration error -23 [ 479.715291][ T6636] net_ratelimit: 24 callbacks suppressed [ 479.715313][ T6636] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 479.825379][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 479.975118][ T6636] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 479.976893][T20288] Bluetooth: hci0: unsupported parameter 5135 [ 479.976910][T20288] Bluetooth: hci0: unsupported parameter 8192 [ 479.976923][T20288] Bluetooth: hci0: unsupported parameter 5135 [ 479.976935][T20288] Bluetooth: hci0: unsupported parameter 8192 [ 480.104963][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.215719][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.340824][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.445908][ T6660] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.556443][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.666191][ T6636] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.758783][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 480.770874][T20321] xfrm1: entered promiscuous mode [ 480.770888][T20321] xfrm1: entered allmulticast mode [ 480.786502][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 480.789008][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 481.075557][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 481.133469][T20345] x_tables: duplicate underflow at hook 1 [ 481.309794][T20355] netlink: 'syz.4.3638': attribute type 3 has an invalid length. [ 481.309815][T20355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3638'. [ 481.501565][T20361] sctp: [Deprecated]: syz.4.3640 (pid 20361) Use of int in max_burst socket option deprecated. [ 481.501565][T20361] Use struct sctp_assoc_value instead [ 481.756108][T20371] xt_limit: Overflow, try lower: 536871034/127 [ 482.010425][T20377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.011832][T20377] xfrm1: left promiscuous mode [ 482.011850][T20377] xfrm1: left allmulticast mode [ 482.222472][T20381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3647'. [ 482.253554][T20386] netlink: 'syz.0.3649': attribute type 1 has an invalid length. [ 482.357640][T20386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.374088][T20391] bond1: entered promiscuous mode [ 482.374111][T20391] bond1: entered allmulticast mode [ 482.430218][T20387] bond1: (slave veth0_to_bond): making interface the new active one [ 482.430241][T20387] veth0_to_bond: entered promiscuous mode [ 482.430473][T20387] veth0_to_bond: entered allmulticast mode [ 482.433963][T20387] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 482.638654][T20403] netlink: 'syz.2.3653': attribute type 30 has an invalid length. [ 482.663542][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3654'. [ 482.663570][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3654'. [ 482.851996][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 482.854183][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3655'. [ 483.053137][T20419] Unknown options in mask 4 [ 483.166526][T20426] lo: entered promiscuous mode [ 483.302275][T20434] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 483.604663][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 483.713369][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'. [ 483.792182][T20455] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3669'. [ 484.019235][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3674'. [ 484.089283][T20471] No such timeout policy "syz1" [ 484.828439][ T991] net_ratelimit: 85 callbacks suppressed [ 484.828488][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.829445][T20087] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 484.937099][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.063856][T20098] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.165861][ T6646] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.295714][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.460936][ T6659] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.523948][T20533] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 485.566668][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 485.680080][T20090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 486.008553][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 486.640184][T20566] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 486.793241][T20566] netlink: 'syz.2.3701': attribute type 27 has an invalid length. [ 486.821127][T20569] netlink: 'syz.3.3702': attribute type 5 has an invalid length. [ 487.186414][T20578] sctp: [Deprecated]: syz.2.3706 (pid 20578) Use of int in max_burst socket option deprecated. [ 487.186414][T20578] Use struct sctp_assoc_value instead [ 488.119590][T20606] __nla_validate_parse: 2 callbacks suppressed [ 488.119610][T20606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3714'. [ 488.264530][T20609] netlink: 'syz.2.3715': attribute type 2 has an invalid length. [ 488.407198][T20613] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 489.129602][T20597] netlink: 'syz.1.3712': attribute type 1 has an invalid length. [ 489.156734][T20597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3712'. [ 489.849044][T20641] bond2: entered promiscuous mode [ 489.875502][T20641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.885140][ T143] net_ratelimit: 38 callbacks suppressed [ 489.885160][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 489.995061][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.020936][ T7060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.082319][T20648] syzkaller0: entered promiscuous mode [ 490.082341][T20648] syzkaller0: entered allmulticast mode [ 490.127337][T20098] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.245002][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.357886][T20098] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.465188][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.577042][ T43] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 490.614036][T20656] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 490.614056][T20656] netlink: 'syz.3.3728': attribute type 3 has an invalid length. [ 490.614069][T20656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3728'. [ 490.654152][T20658] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 490.654172][T20658] netlink: 'syz.3.3728': attribute type 3 has an invalid length. [ 490.654185][T20658] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3728'. [ 490.777672][T20659] pimreg3: entered allmulticast mode [ 490.796845][ T143] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 491.056705][ T7060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.147081][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 491.590254][T20673] bond3: Invalid ad_actor_system MAC address. [ 491.590301][T20673] bond3: option ad_actor_system: invalid value (1) [ 491.622624][T20673] bond3 (unregistering): Released all slaves [ 492.260459][T20683] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3733'. [ 492.399286][T20697] netlink: 'syz.2.3736': attribute type 7 has an invalid length. [ 493.048786][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 493.048845][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 493.399269][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 493.430691][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 493.769939][T20736] syzkaller1: entered promiscuous mode [ 493.769963][T20736] syzkaller1: entered allmulticast mode [ 494.193626][T20746] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3746'. [ 494.238779][T20748] netlink: 'syz.3.3747': attribute type 10 has an invalid length. [ 494.426832][ T32] INFO: task kworker/0:1H:2042 blocked for more than 143 seconds. [ 494.426856][ T32] Not tainted syzkaller #0 [ 494.426866][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.426876][ T32] task:kworker/0:1H state:D stack:25896 pid:2042 tgid:2042 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 494.426948][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 494.427293][ ** replaying previous printk message ** [ 494.427293][ T32] Call Trace: [ 494.427301][ T32] [ 494.427315][ T32] __schedule+0x17dd/0x5830 [ 494.427371][ T32] ? __pfx___schedule+0x10/0x10 [ 494.427404][ T32] ? schedule+0x90/0x2b0 [ 494.427430][ T32] schedule+0x164/0x2b0 [ 494.427460][ T32] schedule_timeout+0x152/0x2c0 [ 494.427489][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 494.427520][ T32] ? __pfx_process_timeout+0x10/0x10 [ 494.427551][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 494.427571][ T32] ? prepare_to_wait_event+0x3e4/0x4d0 [ 494.427591][ T32] ? prepare_to_wait_event+0x440/0x4d0 [ 494.427619][ T32] nbd_queue_rq+0x96a/0xff0 [ 494.427654][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 494.427677][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 494.427719][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.427766][ T32] ? sbitmap_get+0x1b3/0x390 [ 494.427800][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 494.427832][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 494.427871][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.427916][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 494.427941][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 494.427965][ T32] ? lock_acquire+0x115/0x350 [ 494.428033][ T32] ? process_scheduled_works+0x97a/0x1630 [ 494.428067][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.428092][ T32] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 494.428116][ T32] blk_mq_run_work_fn+0x167/0x2f0 [ 494.428141][ T32] ? process_scheduled_works+0x97a/0x1630 [ 494.428171][ T32] process_scheduled_works+0xc3d/0x1630 [ 494.428238][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.428276][ T32] ? assign_work+0x3cf/0x5d0 [ 494.428337][ T32] worker_thread+0xa47/0xfb0 [ 494.428384][ T32] ? __kthread_parkme+0x71/0x1f0 [ 494.428416][ T32] kthread+0x38b/0x480 [ 494.428455][ T32] ? __pfx_worker_thread+0x10/0x10 [ 494.428484][ T32] ? __pfx_kthread+0x10/0x10 [ 494.428507][ T32] ret_from_fork+0x514/0xb70 [ 494.428535][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 494.428558][ T32] ? __switch_to+0xc78/0x1410 [ 494.428593][ T32] ? __pfx_kthread+0x10/0x10 [ 494.428618][ T32] ret_from_fork_asm+0x1a/0x30 [ 494.428659][ T32] [ 494.428840][ T32] [ 494.428840][ T32] Showing all locks held in the system: [ 494.428852][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 494.428867][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 494.428924][ T32] locks held by kworker/u8:2/43: 5, last CPU#1: [ 494.428938][ T32] #0: ffff88802c201148 ((wq_completion)krds_cp_wq#1/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.428990][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.432242][ T32] #2: ffff888055789e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 494.432294][ T32] #3: ffff8880360a8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 494.432342][ T32] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 494.432399][ T32] locks held by kworker/0:1H/2042: 4, on CPU#0: [ 494.432413][ T32] #0: ffff888021697548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.432478][ T32] #1: ffffc900065c7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.432535][ T32] #2: ffff88802779ca18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 494.432587][ T32] #3: ffff888028117338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 494.432645][ T32] locks held by getty/5391: 2, on CPU#0: [ 494.432658][ T32] #0: ffff888036dcc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 494.432710][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 494.432773][ T32] locks held by kworker/u8:20/6646: 4, last CPU#1: [ 494.432787][ T32] #0: ffff88802c206948 ((wq_completion)krds_cp_wq#1/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.432844][ T32] #1: ffffc9000db37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.432901][ T32] #2: ffff888055789280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 494.432949][ T32] #3: ffff888034bb1de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 494.433001][ T32] locks held by udevd/14357: 1, on CPU#0: [ 494.433015][ T32] #0: ffff8880280c2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 494.433071][ T32] locks held by kworker/0:2H/14720: 2, on CPU#0: [ 494.433086][ T32] #0: ffff888021697548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.433155][ T32] #1: ffffc9000344fc40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 494.433221][ T32] locks held by syz.4.3745/20739: 2, last CPU#1: [ 494.433235][ T32] #0: ffff888052426540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 494.433283][ T32] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 494.433339][ T32] locks held by syz.3.3747/20748: 2, on CPU#1: [ 494.433354][ T32] #0: ffffffff919daf18 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 494.433408][ T32] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 494.433461][ T32] locks held by syz.1.3750/20749: 2, on CPU#1: [ 494.433476][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 494.433526][ T32] #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 494.433574][ T32] locks held by syz.0.3748/20751: 1, last CPU#1: [ 494.433588][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 494.433642][ T32] locks held by syz.0.3748/20752: 1, on CPU#1: [ 494.433656][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 494.433703][ T32] locks held by syz.0.3748/20753: 1, on CPU#1: [ 494.433717][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 494.479757][ T32] locks held by syz.0.3748/20757: 1, on CPU#1: [ 494.479776][ T32] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 494.479829][ T32] locks held by syz.2.3749/20756: 1, last CPU#1: [ 494.479843][ T32] #0: ffff88805608dce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 494.479896][ T32] locks held by dhcpcd/20759: 2, last CPU#0: [ 494.479909][ T32] #0: ffff888070fa0088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 494.479971][ T32] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 494.480028][ T32] [ 494.480033][ T32] ============================================= [ 494.480033][ T32] [ 494.480057][ T32] NMI backtrace for cpu 0 [ 494.480079][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 494.480100][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.480112][ T32] Call Trace: [ 494.480119][ T32] [ 494.480126][ T32] dump_stack_lvl+0xe8/0x150 [ 494.480157][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 494.480187][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.480213][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 494.480246][ T32] sys_info+0x135/0x170 [ 494.480270][ T32] watchdog+0x1073/0x10f0 [ 494.480305][ T32] ? watchdog+0x209/0x10f0 [ 494.480337][ T32] kthread+0x38b/0x480 [ 494.480360][ T32] ? __pfx_watchdog+0x10/0x10 [ 494.480383][ T32] ? __pfx_kthread+0x10/0x10 [ 494.480406][ T32] ret_from_fork+0x514/0xb70 [ 494.480436][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 494.480457][ T32] ? __switch_to+0xc78/0x1410 [ 494.480489][ T32] ? __pfx_kthread+0x10/0x10 [ 494.480512][ T32] ret_from_fork_asm+0x1a/0x30 [ 494.480547][ T32] [ 494.480724][ T32] Sending NMI from CPU 0 to CPUs 1: [ 494.480752][ C1] NMI backtrace for cpu 1 [ 494.480767][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 494.480794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.480810][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 494.480841][ C1] Code: e8 2e b2 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 8f bc fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 65 82 06 cc 44 89 f9 80 e1 07 [ 494.480857][ C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 494.480874][ C1] RAX: 1ffffffff37fde00 RBX: 00000000000003fd RCX: 0000000000000000 [ 494.480887][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 494.480900][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 494.480913][ C1] R10: dffffc0000000000 R11: ffffffff85836350 R12: dffffc0000000000 [ 494.480928][ C1] R13: 0000000000000000 R14: ffffffff9bfef700 R15: 0000000000000000 [ 494.480940][ C1] FS: 0000000000000000(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 494.480957][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.480970][ C1] CR2: 000055adb9e03530 CR3: 0000000037640000 CR4: 00000000003526f0 [ 494.480987][ C1] Call Trace: [ 494.480994][ C1] [ 494.481003][ C1] wait_for_lsr+0x184/0x2f0 [ 494.481033][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 494.481061][ C1] serial8250_console_write+0xa7e/0x1200 [ 494.481088][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 494.481116][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 494.481143][ C1] ? __schedule+0x17f3/0x5830 [ 494.481173][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 494.481211][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 494.481246][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 494.481282][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 494.481303][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 494.481333][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 494.481357][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 494.481387][ C1] ? __kthread_parkme+0x71/0x1f0 [ 494.481407][ C1] ? __kthread_parkme+0x199/0x1f0 [ 494.481430][ C1] kthread+0x38b/0x480 [ 494.481456][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 494.481480][ C1] ? __pfx_kthread+0x10/0x10 [ 494.481503][ C1] ret_from_fork+0x514/0xb70 [ 494.481527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 494.481548][ C1] ? __switch_to+0xc78/0x1410 [ 494.481580][ C1] ? __pfx_kthread+0x10/0x10 [ 494.481602][ C1] ret_from_fork_asm+0x1a/0x30 [ 494.481634][ C1] [ 494.481757][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 495.496070][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 495.505178][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 495.515229][ T32] Call Trace: [ 495.518497][ T32] [ 495.521420][ T32] vpanic+0x26f/0x710 [ 495.525398][ T32] panic+0xc5/0xd0 [ 495.529106][ T32] ? __pfx_panic+0x10/0x10 [ 495.533513][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 495.538542][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 495.544707][ T32] watchdog+0x10e7/0x10f0 [ 495.549040][ T32] ? watchdog+0x209/0x10f0 [ 495.553458][ T32] kthread+0x38b/0x480 [ 495.557519][ T32] ? __pfx_watchdog+0x10/0x10 [ 495.562192][ T32] ? __pfx_kthread+0x10/0x10 [ 495.566778][ T32] ret_from_fork+0x514/0xb70 [ 495.571364][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 495.576464][ T32] ? __switch_to+0xc78/0x1410 [ 495.581144][ T32] ? __pfx_kthread+0x10/0x10 [ 495.585727][ T32] ret_from_fork_asm+0x1a/0x30 [ 495.590496][ T32] [ 495.593648][ T32] Kernel Offset: disabled [ 495.597976][ T32] Rebooting in 86400 seconds..